[PATCH] (1/2) new audit filter allows excluding messages by type (kernel)

Steve Grubb sgrubb at redhat.com
Wed Nov 9 13:51:09 UTC 2005


On Wednesday 09 November 2005 08:46, Amy Griffis wrote:
> AUDIT_FILTER_USER is not syscall related and should not have been
> implemented as such.  Stuffing it in the syscall filtering code was
> lazy.

I'm thinking that you are completely misunderstanding all of this.

-Steve




More information about the Linux-audit mailing list